fe546 17.65%
500d9 8.82%
b4ad3 8.82%
5941b 8.82%
f4a94 2.94%
8b672 35.29%
4f841 2.94%
93480 11.76%
27e40 2.94%
(Note, Bit Cocktail Ltd. publishes each variation of this file with the same version, but the hashes are unique.)



By Bit Cocktail Ltd. (Signed)

Remove extensionupdaterservice.exe
Warning 23 antivirus scanners has detected malware in various versions of extensionupdaterservice.exe.


extensionupdaterservice.exe has 9 known versions, the most recent one is . It is started as a Windows Service called 'IB Updater Updater'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 184.34 KB. It is an authenticode code-signed executable issued to Bit Cocktail Ltd. by the certification authority Thawte. The programs IB Updater, IB Updater and Web Assistant have been observed as installing specific variations of extensionupdaterservice.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0091% including both foreground and background operations, the average private memory consumption is about 10.18 MB. Addionally, typically read and write I/O disk operations is about 0 Bytes per minute for reads and 0 Bytes per minute for writes.

What is extensionupdaterservice.exe?

Bit Cocktail Web Assistant Updater is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.

About extensionupdaterservice.exe (from Bit Cocktail Ltd.)

Bitcocktail is home to a variety of products that provide an engaging and productive experience online. Bitcocktail features a variety of social and entertainment destinations like Vidzy, Playzy, Expr


File name:extensionupdaterservice.exe
Typical file path:C:\Program Files\web assistant\extensionupdaterservice.exe
Issued to:Bit Cocktail Ltd.
Authority (CA):Thawte
Expiration date:Wednesday, January 16, 2013
Windows Service
Display name:IB Updater Updater

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of extensionupdaterservice.exe.)
Bit Cocktail Ltd.
  76% remove
Web Assistant installs into the IE and Firefox web browsers and provides advertisier supported searchs that changes and redircts default search results as well as DNS errors. Web Assistant becomes the...
Perion Network Ltd.
  85% remove
The IB (IncrediBar) Updater Service is designed to keep the Perion IncrediBar web browser toolbar (and other related products) up to date. The IB Updater Service runs in the background and periodicall...


(Note, the behaviors below are for all versions of extensionupdaterservice.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • IB Updater Updater

MalwareMalware detections

Based on 40+ industry antivirus scanners, 23 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
Antiy Labs AVL Trojan/Win32.Agent fe546adf53e0ab4c27dc7a49da0e3eca
Antiy Labs AVL Trojan/Win32.Agent 93480110be459273e4333dd23835ddac
Kingsoft 2013.1.8.219 Win32.Troj.Agent.k.(kcloud) 93480110be459273e4333dd23835ddac
Kingsoft 2012.9.22.155 Win32.Troj.Agent2.(kcloud) 27e402c11c323a44c080cbd31182830a
nProtect 2013-02-22.01 Trojan/W32.Agent.188760 fe546adf53e0ab4c27dc7a49da0e3eca
nProtect 2013-03-12.02 Trojan/W32.Agent.188760 500d9370de82cdee6779a97d494df236
nProtect 2013-01-28.02 Trojan/W32.Agent.188760 b4ad333cd57136c2ba441424d30ba3f5
nProtect 2013-02-28.01 Trojan/W32.Agent.188760 5941b8aa229c6e5d7924919d3ede0843
nProtect 2013-03-02.01 Trojan/W32.Agent.188760 f4a9476aa49b69d28be439c64f96c714
nProtect 2012-12-25.01 Trojan/W32.Agent.188760 4f8413b0d925164c679fce772d8aa1ee
nProtect 2013-03-19.01 Trojan/W32.Agent.188760 93480110be459273e4333dd23835ddac
nProtect 2012-12-03.04 Trojan/W32.Agent.188760 27e402c11c323a44c080cbd31182830a
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1114 8b672417438380704e6a39b2f9d78ee8
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1217 93480110be459273e4333dd23835ddac
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 fe546adf53e0ab4c27dc7a49da0e3eca
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 500d9370de82cdee6779a97d494df236
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 b4ad333cd57136c2ba441424d30ba3f5
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 5941b8aa229c6e5d7924919d3ede0843
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 f4a9476aa49b69d28be439c64f96c714
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 8b672417438380704e6a39b2f9d78ee8
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 4f8413b0d925164c679fce772d8aa1ee
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 93480110be459273e4333dd23835ddac
ViRobot 2011.4.7.4223 Trojan.Win32.A.Agent.188760 27e402c11c323a44c080cbd31182830a

VersionsAll file variations of extensionupdaterservice.exe

MD5SHA-1File size
fe546adf53e0ab4c27dc7a49da0e3eca c3240642816a80a006b0dd416b4a084a0e55500a 184.34 KB
500d9370de82cdee6779a97d494df236 255f2fd5914bd318f85c2f9af6c0cebf450e9fd4 184.34 KB
b4ad333cd57136c2ba441424d30ba3f5 7c6db0ab2f65fc08b2ceb4af8ec13ab1c658dc28 184.34 KB
5941b8aa229c6e5d7924919d3ede0843 eb089272179e4d237099df8d7a8c418754539bbe 184.34 KB
f4a9476aa49b69d28be439c64f96c714 73aba700c3955011302a7f4d63cc581311cced27 184.34 KB
8b672417438380704e6a39b2f9d78ee8 bbfbefc54696e5ca11587f2ddd3c9e65fa2530ec 184.34 KB
4f8413b0d925164c679fce772d8aa1ee 241aac02c347a4bef79eb2e7017b617064debde5 184.34 KB
93480110be459273e4333dd23835ddac 3901f0e70944817f3c54aeca6481e994444ad7c2 184.34 KB
27e402c11c323a44c080cbd31182830a 41cbeaea8792cf5ccc4cd63eb2c1d8fb2302ea1b 184.34 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 26.47%
Microsoft Windows XP 20.59%
Windows 7 Ultimate N 17.65%
Windows 7 Ultimate 11.76%
Windows 7 Professional 8.82%
Windows Vista Ultimate 5.88%
Windows 8 Release Preview 5.88%
Windows Vista Home Premium 2.94%

Distribution by countryDistribution by country

United States installs about 41.38% of extensionupdaterservice.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE